CVE-2017-1328

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-06-27 · updated 2026-06-17

Description

IBM API Connect 5.0.0.0 - 5.0.6.0 could allow a remote attacker to bypass security restrictions of the api, caused by improper handling of security policy. By crafting a suitable request, an attacker could exploit this vulnerability to bypass security and use the vulnerable API. IBM X-Force ID: 126230.

Affected products

IBM API Connect: 5.0.0.0, 5.0.0.1, 5.0.1.0, 5.0.2.0, 5.0.3.0, 5.0.4.0 (+4)

References

http://www.ibm.com/support/docview.wss?uid=swg22003867
http://www.securityfocus.com/bid/99267
https://exchange.xforce.ibmcloud.com/vulnerabilities/126230
http://www.ibm.com/support/docview.wss?uid=swg22003867
http://www.securityfocus.com/bid/99267
https://exchange.xforce.ibmcloud.com/vulnerabilities/126230

Get alerted when CVE-2017-1328 or the next vulnerability affects your stack